Pub a la place de mon resultat
Résolufrancis du 02 -
35 réponses
- 1
- 2
Un problème de redirections publicitaires perturbe les résultats Google et nécessite plusieurs tentatives pour afficher la page désirée sur Windows XP et Internet Explorer 7. Des interventions successives proposent un diagnostic via ZHPDiag et ZHPFix, puis la suppression de composants indésirables avec Ad-Remover et Kiwee/Conduit, et le nettoyage des traces dans le registre et les navigateurs. Des rapports techniques détaillent les actions effectuées, notamment la suppression de dossiers, de clés et d’extensions, ainsi que la mise en quarantaine de fichiers malveillants. En cas de suite, des liens d’archives et des scripts d’assistance ont été partagés pour faciliter la collecte des rapports et la remise en état système.
-
Salut, c'est sûrement un adware.
-+-+-+-+-> ZHPDiag <-+-+-+-+-
[x] Nous allons effectuer un diagnostic de ton ordinateur, pour ce faire, télécharge ZHPDiag ( de Nicolas Coolman ).
[x] Exécute l'installateur ( /!\ Coche la case " créer une icône sur le bureau /!\ ) puis lance le une fois l'installation terminée.
[x] Clique sur l'icône en forme de loupe en haut à gauche ( Lancer le diagnostic ).
[x] Une fois l'analyse terminée, clique sur l'icône en forme de disquette bleue puis sauvegarde le fichier sur ton bureau.
[x] Rend toi sur cjoint puis clique sur " Choisissez un fichier ".
[x] Sélectionne le fichier ZHPDiag.txt présent sur ton bureau, puis clique sur " Ouvrir ".
[x] Clique ensuite sur " Créer le lien cjoint " puis copie/colle dans ta prochaine réponse le lien créé. -
-
En effet tu es bien infecté. On va commencer par ceci :
-+-+-+-+-> Navilog <-+-+-+-+-
[x] Télécharge Navilog sur ton bureau.
[x] Si ton antivirus s'affole, désactive le momentanément.
[x] Lance navilog ( sous vista/7 -> Clic droit puis " Exécuter en tant qu'administrateur " )
[x] Choisis l'option 1 ( Français ), suis les instructions puis choisis l'option 1 ( Recherche / Désinfection automatique )
[x] Patiente pendant le scan. A la fin du scan, appuie sur une touche.
[x] Un rapport va s'ouvrir, copie/colle son contenu dans ton prochain message.
[x] Note : Le rapport est sauvegardé sous C:\Cleannavi.txt.
-+-+-+-+-> AD-Remover <-+-+-+-+-
[x] Télécharge AD-Remover ( de C_XX ).
[x] Si tu es sous vista, désactive l'UAC. Pour Seven, c'est ici.
[x] Lance AD-Remover puis choisis l'option " Nettoyer ".
[x] Patiente pendant le scan, un rapport s'ouvrira ensuite. Poste son contenu dans ton prochain message
[x] Note : Le rapport se trouve également sous C:\Ad-Report-CLEAN.txt -
Fix Navipromo version 4.0.8 commencé le 18/06/2010 20:50:25,93
!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
Outil exécuté depuis C:\navilog1
Mise à jour le 09.03.2010 à 18h00 par IL-MAFIOSO
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3000+ )
BIOS : Rev 2.00
USER : Françis ( Administrator )
BOOT : Normal boot
Antivirus : Kaspersky Anti-Virus 9.0.0.736 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:92 Go (Free:3 Go)
D:\ (CD or DVD) - UDF - Total:0 Go (Free:0 Go)
E:\ (CD or DVD)
F:\ (Local Disk) - NTFS - Total:97 Go (Free:91 Go)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)
Recherche executée en mode normal
Nettoyage exécuté au redémarrage de l'ordinateur
C:\DOCUME~1\PROPRI~1\menudm~1\progra~1\InternetGamebox supprimé !
C:\WINDOWS\pack.epk supprimé !
C:\WINDOWS\system32\cyodhb.dat supprimé !
C:\WINDOWS\system32\odekfko.dat supprimé !
Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Fran#is\locals~1\Temp effectué !
*** Sauvegarde du Registre vers dossier Safebackup ***
sauvegarde du Registre réalisée avec succès !
*** Nettoyage Registre ***
Nettoyage Registre Ok
Certificat Egroup supprimé !
Certificat Electronic-Group supprimé !
Certificat OOO-Favorit supprimé !
*** Scan terminé 18/06/2010 21:00:14,06 *** -
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
======= RAPPORT D'AD-REMOVER 2.0.0.1,C | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par C_XX le 17/06/10 à 18:00
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 21:20:11 le 18/06/2010, Mode normal
Microsoft Windows XP Professionnel Service Pack 2 (X86)
Françis, PROPRIET-U0S6XL ( )
============== ACTION(S) ==============
0,Dossier supprimé: C:\WINDOWS\system32\Favorites
0,Dossier supprimé: C:\Documents and Settings\Françis\Local Settings\Application Data\Conduit
0,Dossier supprimé: C:\Program Files\Conduit
0,Dossier supprimé: C:\Documents and Settings\Françis\Application Data\EoRezo
0,Dossier supprimé: C:\Documents and Settings\PROPRIETAIRE\Application Data\EoRezo
0,Dossier supprimé: C:\Program Files\EoRezo
0,Dossier supprimé: C:\Program Files\GamesBar
0,Dossier supprimé: C:\Documents and Settings\Françis\Application Data\HbTools
0,Dossier supprimé: C:\Documents and Settings\PROPRIETAIRE\Application Data\iWin
0,Dossier supprimé: C:\Documents and Settings\All Users\Application Data\iWin
0,Dossier supprimé: C:\Documents and Settings\All Users\Application Data\Kiwee Toolbar2
0,Dossier supprimé: C:\Documents and Settings\Françis\Local Settings\Application Data\Kiwee Toolbar2
0,Dossier supprimé: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Kiwee Toolbar2
0,Dossier supprimé: C:\Program Files\Kiwee Toolbar2
0,Dossier supprimé: C:\Program Files\Letmin
0,Dossier supprimé: C:\Documents and Settings\All Users\Application Data\Trymedia
0,Dossier supprimé: C:\Program Files\Trymedia
0,Dossier supprimé: C:\Documents and Settings\PROPRIETAIRE\Application Data\VMNTOOLBAR
(!) -- Fichiers temporaires supprimés.
1,Clé supprimée: HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}
1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{6E15D3C4-C6FC-4F02-B130-77CC5B1F09DB}
1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6E15D3C4-C6FC-4F02-B130-77CC5B1F09DB}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{E03BAFDC-EB9D-4C35-A7A2-AB6C62FF0A68}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{E6375F37-E4D1-4F51-B651-4658C27AC5BF}
1,Clé supprimée: HKLM\Software\Classes\Interface\{3E16A203-C0AA-4D44-ACC5-38A70A8C76DA}
1,Clé supprimée: HKLM\Software\Classes\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{259EEB17-79AA-44DF-8410-8E55F82A902A}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{C7403C30-3644-43D8-A82F-4BD84B9682D9}
0,Clé supprimée: HKLM\Software\Classes\AG.MediaPlayerCOM
0,Clé supprimée: HKLM\Software\Classes\EoRezoBHO.EoBho
0,Clé supprimée: HKLM\Software\Classes\EoRezoBHO.EoBho.1
0,Clé supprimée: HKLM\Software\Classes\KiweeIEToolbar.KiweeToolbar
0,Clé supprimée: HKLM\Software\Classes\KiweeIEToolbar.KiweeToolbar.1
0,Clé supprimée: HKLM\Software\Classes\KiweeIEToolbar.ToolbarInfo
0,Clé supprimée: HKLM\Software\Classes\KiweeIEToolbar.ToolbarInfo.1
0,Clé supprimée: HKLM\Software\AGI
0,Clé supprimée: HKLM\Software\Conduit
0,Clé supprimée: HKLM\Software\PopCap
0,Clé supprimée: HKLM\Software\Trymedia Systems
0,Clé supprimée: HKCU\Software\AGI
0,Clé supprimée: HKCU\Software\Conduit
0,Clé supprimée: HKCU\Software\EoRezo
0,Clé supprimée: HKCU\Software\FunWebProducts
3,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5EC51EB3-F5B7-4548-B1F9-B08E9E294C11}
3,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{64EE7B77-7579-47a9-96C2-9B35529B9919}
0,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search
0,Clé supprimée: HKLM\Software\Microsoft\Code Store Database\Distribution Units\CabBuilder
0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWebSearch bar Uninstall
0,Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|KiweeHook
0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}
0,Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}
0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33}
0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}
============== SCAN ADDITIONNEL ==============
** Mozilla Firefox Version [3.5.7 (fr)] **
-- C:\Documents and Settings\Françis\Application Data\Mozilla\FireFox\Profiles\wyxvnf7i.default\Prefs.js --
browser.startup.homepage, hxxp://www.orange.fr/|www.google.fr/
browser.startup.homepage_override.mstone, rv:1.9.1.7
========================================
** Internet Explorer Version [7.0.5730.11] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Custom Search URL: 0
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files\Ad-Remover\Quarantine: 1868 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 13 Fichier(s)
C:\Ad-Report-CLEAN[1].txt - 18/06/2010 (6619 Octet(s))
Fin à: 21:26:56, 18/06/2010
============== E.O.F ============== -
On continue :
-+-+-+-+-> Malwarebytes' Anti-Malware <-+-+-+-+-
[x] Télécharge Malwarebytes' Anti-malware sur ton bureau.
[x] Installe le en laissant les options par défaut ( Cocher seulement " Créer une icône sur le bureau " )
[x] A la fin de l'installation, MBAM se mettra à jour automatiquement puis s'exécutera.
[x] Une fois lancé, clique sur " Exécuter un examen complet " puis sur " Rechercher "
[x] Sélectionne tout tes disques locaux et amovibles
[x] Patiente pendant toute la durée du scan, puis clique sur " Ok " une fois l'analyse effectuée.
[x] Clique ensuite sur " Afficher les résultats " puis sur " Supprimer la sélection ". Valide ensuite par " Ok ".
[x] MBAM ouvrira un rapport, copie/colle son contenu dans ta prochaine réponse.
[x] Tu peux ensuite vider la quarantaine de MBAM.
[x] Note : MBAM t'invitera peut être à redémarrer ton PC, fais le. Le rapport se trouve dans la partie " Rapports/Logs " de MBAM.
[x] Si tu as des soucis, un tutoriel est disponible à cette adresse. -
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Version de la base de données: 4214
Windows 5.1.2600 Service Pack 2
Internet Explorer 7.0.5730.11
19/06/2010 10:10:48
mbam-log-2010-06-19 (10-10-48).txt
Type d'examen: Examen complet (C:\|F:\|G:\|H:\|I:\|J:\|)
Elément(s) analysé(s): 378386
Temps écoulé: 3 heure(s), 16 minute(s), 38 seconde(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 26
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Protection Center (Rogue.ProtectionCenter) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.fsharproj (Trojan.Tracur) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\protection center (Rogue.ProtectionCenter) -> Quarantined and deleted successfully.
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
C:\Program Files\Protection Center (Rogue.ProtectionCenter) -> Quarantined and deleted successfully.
Fichier(s) infecté(s):
C:\System Volume Information\_restore{9C021AB8-DED9-43D9-AF79-7811DC17E297}\RP681\A0697945.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{9C021AB8-DED9-43D9-AF79-7811DC17E297}\RP681\A0697971.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{9C021AB8-DED9-43D9-AF79-7811DC17E297}\RP681\A0697972.exe (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{9C021AB8-DED9-43D9-AF79-7811DC17E297}\RP681\A0697990.exe (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{9C021AB8-DED9-43D9-AF79-7811DC17E297}\RP681\A0697991.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{9C021AB8-DED9-43D9-AF79-7811DC17E297}\RP681\A0698020.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{9C021AB8-DED9-43D9-AF79-7811DC17E297}\RP682\A0698448.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{9C021AB8-DED9-43D9-AF79-7811DC17E297}\RP682\A0698422.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{9C021AB8-DED9-43D9-AF79-7811DC17E297}\RP682\A0698449.exe (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\3.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\4.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\5.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\B.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dfrgui32(2).dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\Program Files\Protection Center\about.ico (Rogue.ProtectionCenter) -> Quarantined and deleted successfully.
C:\Program Files\Protection Center\activate.ico (Rogue.ProtectionCenter) -> Quarantined and deleted successfully.
C:\Program Files\Protection Center\buy.ico (Rogue.ProtectionCenter) -> Quarantined and deleted successfully.
C:\Program Files\Protection Center\cnt.db (Rogue.ProtectionCenter) -> Quarantined and deleted successfully.
C:\Program Files\Protection Center\help.ico (Rogue.ProtectionCenter) -> Quarantined and deleted successfully.
C:\Program Files\Protection Center\scan.ico (Rogue.ProtectionCenter) -> Quarantined and deleted successfully.
C:\Program Files\Protection Center\settings.ico (Rogue.ProtectionCenter) -> Quarantined and deleted successfully.
C:\Program Files\Protection Center\splash.mp3 (Rogue.ProtectionCenter) -> Quarantined and deleted successfully.
C:\Program Files\Protection Center\Thumbs.db (Rogue.ProtectionCenter) -> Quarantined and deleted successfully.
C:\Program Files\Protection Center\update.ico (Rogue.ProtectionCenter) -> Quarantined and deleted successfully.
C:\Program Files\Protection Center\virus.mp3 (Rogue.ProtectionCenter) -> Quarantined and deleted successfully.
C:\Program Files\skynet.dat (Malware.Trace) -> Quarantined and deleted successfully.
voici le resultat -
-
Le problème est peut être résolu mais c'est pas pour autant qu'on a terminé !
Refais un rapport ZHPDiag -
-
Ok, on continue :
-+-+-+-+-> Load_TDSSKiller <-+-+-+-+-
[x] Télécharge Load_TDSSKiller ( de Loup Blanc ) sur ton bureau.
[x] Lance le ( Utilisateurs de vista/Seven -> Clic droit puis " Exécuter en tant qu'administrateur " )
[x] L'outil va télécharger automatiquement la dernière version de TDSSKiller puis lancera une analyse.
[x] Patiente pendant le scan. A la fin de l'analyse, appuies sur une touche. Un rapport va s'ouvrir.
[x] Copie/Colle son contenu dans ta prochaine réponse.
[x] Note : Le rapport se trouve également sous C:\tdsskiller\report.txt. -
16:28:05:312 1944 TDSS rootkit removing tool 2.3.2.0 May 31 2010 10:39:48
16:28:05:312 1944 ================================================================================
16:28:05:312 1944 SystemInfo:
16:28:05:312 1944 OS Version: 5.1.2600 ServicePack: 2.0
16:28:05:312 1944 Product type: Workstation
16:28:05:312 1944 ComputerName: PROPRIET-U0S6XL
16:28:05:312 1944 UserName: Françis
16:28:05:312 1944 Windows directory: C:\WINDOWS
16:28:05:312 1944 Processor architecture: Intel x86
16:28:05:312 1944 Number of processors: 1
16:28:05:312 1944 Page size: 0x1000
16:28:05:312 1944 Boot type: Normal boot
16:28:05:312 1944 ================================================================================
16:28:05:984 1944 Initialize success
16:28:05:984 1944
16:28:05:984 1944 Scanning Services ...
16:28:06:531 1944 Raw services enum returned 356 services
16:28:06:546 1944
16:28:06:546 1944 Scanning Drivers ...
16:28:15:984 1944 ACPI (0bd94fbfc14ea3606cd6ca4c0255baa3) C:\WINDOWS\system32\DRIVERS\ACPI.sys
16:28:16:593 1944 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys
16:28:17:390 1944 aeaudio (11c04b17ed2abbb4833694bcd644ac90) C:\WINDOWS\system32\drivers\aeaudio.sys
16:28:17:453 1944 aec (1ee7b434ba961ef845de136224c30fec) C:\WINDOWS\system32\drivers\aec.sys
16:28:17:578 1944 AFD (55e6e1c51b6d30e54335750955453702) C:\WINDOWS\System32\drivers\afd.sys
16:28:17:906 1944 AnyDVD (aae88fad02ff00438162752e87013a78) C:\WINDOWS\system32\Drivers\AnyDVD.sys
16:28:18:078 1944 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
16:28:18:156 1944 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
16:28:18:281 1944 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
16:28:18:359 1944 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
16:28:18:421 1944 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
16:28:18:546 1944 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
16:28:18:625 1944 CCDECODE (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
16:28:18:781 1944 CdaC15BA (08f60f40d1a2a95a1f12eddbd9f25c1c) C:\WINDOWS\system32\drivers\CdaC15BA.SYS
16:28:18:890 1944 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
16:28:19:000 1944 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
16:28:19:093 1944 Cdrom (7b53584d94e9d8716b2de91d5f1cb42d) C:\WINDOWS\system32\DRIVERS\cdrom.sys
16:28:19:328 1944 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
16:28:19:406 1944 dmboot (e2d3b7620310fe56685f9b15a6b404b3) C:\WINDOWS\system32\drivers\dmboot.sys
16:28:19:531 1944 dmio (c77f5c20aa70197a69aa84baa9de43c8) C:\WINDOWS\system32\drivers\dmio.sys
16:28:19:593 1944 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
16:28:19:687 1944 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
16:28:19:875 1944 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
16:28:19:984 1944 eeCtrl (2d401f82d4e81aaf89daaa45f04782a2) C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys
16:28:20:109 1944 ElbyCDIO (084a13f18856d610d44d3109a9d2acde) C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
16:28:20:171 1944 ElbyDelay (df9957db3bfe5136aad3c2c101806c98) C:\WINDOWS\system32\Drivers\ElbyDelay.sys
16:28:20:218 1944 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
16:28:20:312 1944 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
16:28:20:390 1944 Fips (8b121ff880683607ab2aef0340721718) C:\WINDOWS\system32\drivers\Fips.sys
16:28:20:437 1944 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
16:28:20:515 1944 FltMgr (3d234fb6d6ee875eb009864a299bea29) C:\WINDOWS\system32\drivers\fltmgr.sys
16:28:20:625 1944 fssfltr (e0087225b137e57239ff40f8ae82059b) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
16:28:20:750 1944 FsUsbExDisk (790a4ca68f44be35967b3df61f3e4675) C:\WINDOWS\system32\FsUsbExDisk.SYS
16:28:20:843 1944 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
16:28:20:890 1944 Ftdisk (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
16:28:21:000 1944 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
16:28:21:062 1944 HidUsb (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys
16:28:21:171 1944 HTTP (9f8b0f4276f618964fd118be4289b7cd) C:\WINDOWS\system32\Drivers\HTTP.sys
16:28:21:312 1944 i8042prt (d1efcbd693b5ba21314d06368c471070) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
16:28:21:375 1944 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
16:28:21:609 1944 ip6fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\drivers\ip6fw.sys
16:28:21:734 1944 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
16:28:21:843 1944 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
16:28:21:953 1944 IpNat (e2168cbc7098ffe963c6f23f472a3593) C:\WINDOWS\system32\DRIVERS\ipnat.sys
16:28:22:046 1944 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
16:28:22:093 1944 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
16:28:22:171 1944 isapnp (54632f1a7de61dc3615d756f2a90fa72) C:\WINDOWS\system32\DRIVERS\isapnp.sys
16:28:22:281 1944 Kbdclass (e798705e8dc7fab596ef6bfdf167e007) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
16:28:22:343 1944 kbdhid (62dd5eefcec4ef4163f1168d4262a9e4) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
16:28:22:421 1944 kl1 (ce3958f58547454884e97bda78cd7040) C:\WINDOWS\system32\drivers\kl1.sys
16:28:22:515 1944 klbg (53eedab3f0511321ac3ae8bc968b158c) C:\WINDOWS\system32\drivers\klbg.sys
16:28:22:593 1944 KLIF (439c778700fce23f2852535d6fa5996d) C:\WINDOWS\system32\DRIVERS\klif.sys
16:28:22:687 1944 klim5 (fbdc2034b58d2135d25fe99eb8b747c3) C:\WINDOWS\system32\DRIVERS\klim5.sys
16:28:22:890 1944 klmd23 (67e1faa88fb397b3d56909d7e04f4dd3) C:\WINDOWS\system32\drivers\klmd.sys
16:28:22:968 1944 klmouflt (1f351c4ba53bfe58a1ca5fcdd11e1f81) C:\WINDOWS\system32\DRIVERS\klmouflt.sys
16:28:23:078 1944 kmixer (ba5deda4d934e6288c2f66caf58d2562) C:\WINDOWS\system32\drivers\kmixer.sys
16:28:23:140 1944 KSecDD (674d3e5a593475915dc6643317192403) C:\WINDOWS\system32\drivers\KSecDD.sys
16:28:23:265 1944 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
16:28:23:328 1944 Modem (5ac7e16f5b40a6da14b5f2b3ada4693e) C:\WINDOWS\system32\drivers\Modem.sys
16:28:23:390 1944 Mouclass (7d4f19411bd941e1d432a99e24230386) C:\WINDOWS\system32\DRIVERS\mouclass.sys
16:28:23:562 1944 mouhid (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys
16:28:23:625 1944 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
16:28:23:750 1944 MRxDAV (29414447eb5bde2f8397dc965dbb3156) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
16:28:23:859 1944 MRxSmb (fb6c89bb3ce282b08bdb1e3c179e1c39) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
16:28:24:000 1944 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
16:28:24:062 1944 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
16:28:24:140 1944 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
16:28:24:218 1944 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
16:28:24:296 1944 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
16:28:24:390 1944 MSTEE (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys
16:28:24:468 1944 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
16:28:24:546 1944 NABTSFEC (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
16:28:24:625 1944 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
16:28:24:781 1944 NdisIP (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
16:28:24:875 1944 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
16:28:24:953 1944 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
16:28:25:000 1944 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
16:28:25:093 1944 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
16:28:25:171 1944 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
16:28:25:250 1944 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
16:28:25:343 1944 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
16:28:25:437 1944 Ntfs (19a811ef5f1ed5c926a028ce107ff1af) C:\WINDOWS\system32\drivers\Ntfs.sys
16:28:25:531 1944 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
16:28:25:781 1944 nv (be10db9ad60d5814aeff31d976b99448) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
16:28:26:156 1944 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
16:28:26:234 1944 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
16:28:26:359 1944 Parport (318696359ac7df48d1e51974ec527dd2) C:\WINDOWS\system32\DRIVERS\parport.sys
16:28:26:453 1944 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
16:28:26:500 1944 ParVdm (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys
16:28:26:578 1944 PCAMPR5 (b670c5d89f0726b7a2a7dfb4e968cdf8) C:\WINDOWS\system32\PCAMPR5.SYS
16:28:26:687 1944 PCANDIS5 (ecd2f9d67b06606064daf6961a6d5efe) C:\WINDOWS\system32\PCANDIS5.SYS
16:28:26:828 1944 pccsmcfd (175cc28dcf819f78caa3fbd44ad9e52a) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
16:28:26:906 1944 PCI (7c5da5c1ed801ad8b0309d5514f0b75e) C:\WINDOWS\system32\DRIVERS\pci.sys
16:28:27:062 1944 Pcmcia (641da274e163617ea7a33506bc6da8e3) C:\WINDOWS\system32\drivers\Pcmcia.sys
16:28:27:828 1944 pfc (6c1618a07b49e3873582b6449e744088) C:\WINDOWS\system32\drivers\pfc.sys
16:28:27:921 1944 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
16:28:28:046 1944 PQNTDrv (87d211ba1e9759e26b6296e625a31ce8) C:\WINDOWS\system32\drivers\PQNTDrv.sys
16:28:28:125 1944 Processor (f480712b761e538bc8e44ede60f3a3c3) C:\WINDOWS\system32\DRIVERS\processr.sys
16:28:28:218 1944 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
16:28:28:296 1944 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
16:28:28:406 1944 PxHelp20 (49452bfcec22f36a7a9b9c2181bc3042) C:\WINDOWS\system32\Drivers\PxHelp20.sys
16:28:28:625 1944 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
16:28:28:828 1944 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
16:28:28:890 1944 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
16:28:28:937 1944 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
16:28:29:000 1944 Rdbss (03b965b1ca47f6ef60eb5e51cb50e0af) C:\WINDOWS\system32\DRIVERS\rdbss.sys
16:28:29:078 1944 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
16:28:29:187 1944 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
16:28:29:281 1944 RDPWD (b54cd38a9ebfbf2b3561426e3fe26f62) C:\WINDOWS\system32\drivers\RDPWD.sys
16:28:29:359 1944 redbook (2cc30b68dd62b73d444a41322cd7fc4c) C:\WINDOWS\system32\DRIVERS\redbook.sys
16:28:29:453 1944 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
16:28:29:515 1944 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
16:28:29:593 1944 serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
16:28:29:718 1944 Serial (653201755ca96ab4aaa4131daf6da356) C:\WINDOWS\system32\DRIVERS\serial.sys
16:28:29:906 1944 sfdrv01 (4c0d673281178cb496011a2e28571fc8) C:\WINDOWS\system32\drivers\sfdrv01.sys
16:28:29:937 1944 sfhlp02 (15be2b5e4dc5b8623cf167720682abc9) C:\WINDOWS\system32\drivers\sfhlp02.sys
16:28:30:000 1944 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
16:28:30:156 1944 SLIP (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys
16:28:30:250 1944 smwdm (1d381a07361e4d6a8be95026b3eba47a) C:\WINDOWS\system32\drivers\smwdm.sys
16:28:30:359 1944 snpstd2 (7fc5b8e9581e543fb42fb8dcde3132e2) C:\WINDOWS\system32\DRIVERS\snpstd2.sys
16:28:30:468 1944 splitter (0ce218578fff5f4f7e4201539c45c78f) C:\WINDOWS\system32\drivers\splitter.sys
16:28:30:546 1944 SQTECH905C (6f6a0307c30b33e65aaf52c46cea2ecd) C:\WINDOWS\system32\Drivers\Capt905c.sys
16:28:30:671 1944 sr (b52181023b827acda36c1b76751ebffd) C:\WINDOWS\system32\DRIVERS\sr.sys
16:28:30:812 1944 Srv (7a4f147cc6b133f905f6e65e2f8669fb) C:\WINDOWS\system32\DRIVERS\srv.sys
16:28:30:906 1944 StarOpen (306521935042fc0a6988d528643619b3) C:\WINDOWS\system32\drivers\StarOpen.sys
16:28:31:015 1944 streamip (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
16:28:31:093 1944 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
16:28:31:140 1944 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
16:28:31:390 1944 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
16:28:31:484 1944 Tcpip (2a5554fc5b1e04e131230e3ce035c3f9) C:\WINDOWS\system32\DRIVERS\tcpip.sys
16:28:31:562 1944 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
16:28:31:656 1944 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
16:28:31:734 1944 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys
16:28:31:828 1944 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
16:28:31:968 1944 Update (aff2e5045961bbc0a602bb6f95eb1345) C:\WINDOWS\system32\DRIVERS\update.sys
16:28:32:046 1944 usbaudio (45a0d14b26c35497ad93bce7e15c9941) C:\WINDOWS\system32\drivers\usbaudio.sys
16:28:32:125 1944 usbccgp (bffd9f120cc63bcbaa3d840f3eef9f79) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
16:28:32:218 1944 usbehci (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys
16:28:32:656 1944 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
16:28:32:781 1944 usbprint (a42369b7cd8886cd7c70f33da6fcbcf5) C:\WINDOWS\system32\DRIVERS\usbprint.sys
16:28:32:859 1944 usbscan (a6bc71402f4f7dd5b77fd7f4a8ddba85) C:\WINDOWS\system32\DRIVERS\usbscan.sys
16:28:32:968 1944 USBSTOR (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
16:28:33:015 1944 usbuhci (f8fd1400092e23c8f2f31406ef06167b) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
16:28:33:109 1944 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
16:28:33:171 1944 viaagp1 (4b039bbd037b01f5db5a144c837f283a) C:\WINDOWS\system32\DRIVERS\viaagp1.sys
16:28:33:281 1944 ViaIde (59cb1338ad3654417bea49636457f65d) C:\WINDOWS\system32\DRIVERS\viaide.sys
16:28:33:359 1944 VolSnap (313b1a0d5db26dfe1c34a6c13b2ce0a7) C:\WINDOWS\system32\drivers\VolSnap.sys
16:28:33:437 1944 vulfnths (c9a8ba443f809b70bccccd60cc73fa5c) C:\WINDOWS\System32\Drivers\vulfnth.sys
16:28:33:515 1944 vulfntrs (2d8c55889616f7767e9fb8adee37a02a) C:\WINDOWS\System32\Drivers\vulfntr.sys
16:28:33:609 1944 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
16:28:33:796 1944 wceusbsh (dc7f91b2ed24a738c807ea07f298928c) C:\WINDOWS\system32\DRIVERS\wceusbsh.sys
16:28:33:906 1944 wdmaud (efd235ca22b57c81118c1aeb4798f1c1) C:\WINDOWS\system32\drivers\wdmaud.sys
16:28:33:984 1944 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\Drivers\wpdusb.sys
16:28:34:093 1944 WSTCODEC (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
16:28:34:187 1944 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
16:28:34:281 1944 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
16:28:34:359 1944 yukonwxp (dee4899b4ac10a673b2df0cdd135167e) C:\WINDOWS\system32\DRIVERS\yukonwxp.sys
16:28:34:390 1944
16:28:34:390 1944 Completed
16:28:34:390 1944
16:28:34:390 1944 Results:
16:28:34:390 1944 Registry objects infected / cured / cured on reboot: 0 / 0 / 0
16:28:34:390 1944 File objects infected / cured / cured on reboot: 0 / 0 / 0
16:28:34:390 1944
16:28:34:390 1944 KLMD(ARK) unloaded successfully -
Ok on continue :
-+-+-+-+-> ZHPFix <-+-+-+-+-
/!\ Utilisateurs de vista/7 , cette manipulation est à effectuer en tant qu'administrateur ( Clic droit -> [Exécuter en tant qu'administrateur] ) /!\
[x] Lance ZHPFix ( sur ton bureau ) puis clique sur le H bleu " Coller les lignes helper ".
[x] Copie/Colle le contenu de ce fichier dans l'encadré blanc puis clique sur [Ok]
[x] Clique maintenant sur [Tous] , puis sur [Nettoyer]
[x] Copie/Colle le contenu du rapport à l'écran dans ton prochain message.
[x] Note : le rapport se trouve également sous C:\Program Files\ZHPDiag\ZHPFixReport.txt -
-
-
LADS - Freeware version 4.10
(C) Copyright 1998-2007 Frank Heyne Software (http://www.heysoft.de)
This program lists files with alternate data streams (ADS)
Use LADS on your own risk!
Scanning directory C:\WINDOWS\System32\Drivers\
size ADS in file
---------- ---------------------------------
0 bytes in 0 ADS listed -
Ce n'est pas le rapport ZHPFixReport.txt
-
-
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"LinksFolderName"="Liens"
"Locked"=dword:00000001
"ShowDiscussionButton"="Yes"
"SaveLinksOrder"=hex:01,00,00,00
"{1E796980-9CC5-11D1-A83F-00C04FC99D61}"=hex:07,00,00,00,00,00,00,00,7e,69,79,\
1e,c5,9c,d1,11,a8,3f,00,c0,4f,c9,9d,61,20,01,00,00,04,00,00,00,00,00,00,00,\
7e,69,79,1e,c5,9c,d1,11,a8,3f,00,c0,4f,c9,9d,61,21,01,00,00,04,00,00,00,00,\
00,00,00,7e,69,79,1e,c5,9c,d1,11,a8,3f,00,c0,4f,c9,9d,61,24,01,00,00,04,00,\
00,00,00,00,00,00,7e,69,79,1e,c5,9c,d1,11,a8,3f,00,c0,4f,c9,9d,61,25,01,00,\
00,04,00,00,00,00,00,00,00,7e,69,79,1e,c5,9c,d1,11,a8,3f,00,c0,4f,c9,9d,61,\
22,01,00,00,04,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,7e,69,79,1e,c5,9c,d1,\
11,a8,3f,00,c0,4f,c9,9d,61,23,01,00,00,04,00,00,00,00,00,00,00,7e,69,79,1e,\
c5,9c,d1,11,a8,3f,00,c0,4f,c9,9d,61,26,01,00,00,04,00,00,00,00,00,00,00,7e,\
69,79,1e,c5,9c,d1,11,a8,3f,00,c0,4f,c9,9d,61,2e,01,00,00,04,00,00,00
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\Explorer]
"ITBarLayout"=hex:11,00,00,00,4c,00,00,00,00,00,00,00,24,00,00,00,1b,00,00,00,\
56,00,00,00,01,00,00,00,20,07,00,00,a0,0f,00,00,05,00,00,00,62,05,00,00,26,\
00,00,00,02,00,00,00,21,07,00,00,a0,0f,00,00,04,00,00,00,21,01,00,00,a0,0f,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser]
"{01E04581-4EEE-11D0-BFE9-00AA005B4383}"=hex:81,45,e0,01,ee,4e,d0,11,bf,e9,00,\
aa,00,5b,43,83,10,00,00,00,00,00,00,00,01,e0,32,f4,01,00,00,00
"ITBarLayout"=hex:11,00,00,00,4c,00,00,00,00,00,00,00,24,00,00,00,1b,00,08,00,\
56,00,00,00,01,00,00,00,a0,06,00,00,a0,0f,00,00,05,00,00,00,62,04,00,00,26,\
00,00,00,02,00,00,00,a1,06,00,00,a0,0f,00,00,04,00,00,00,a1,00,00,00,a0,0f,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"{74CC49F7-EB32-4A08-B204-948962A6E3DB}"=hex:f7,49,cc,74,32,eb,08,4a,b2,04,94,\
89,62,a6,e3,db
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{01E04581-4EEE-11D0-BFE9-00AA005B4383}"=hex:81,45,e0,01,ee,4e,d0,11,bf,e9,00,\
aa,00,5b,43,83,10,00,00,00,00,00,00,00,01,e0,32,f4,01,00,00,00
"{0E5CBF21-D15F-11D0-8301-00AA005B4383}"=hex:21,bf,5c,0e,5f,d1,d0,11,83,01,00,\
aa,00,5b,43,83,22,00,1c,00,08,00,00,00,06,00,00,00,01,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,4c,00,00,00,01,14,02,00,00,00,00,00,c0,00,00,00,00,\
00,00,46,81,00,00,00,10,00,00,00,56,df,d2,54,62,22,c7,01,9a,23,3e,29,bf,65,\
c8,01,ba,db,21,5a,62,22,c7,01,00,00,00,00,00,00,00,00,01,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,4f,01,14,00,1f,50,e0,4f,d0,20,ea,3a,69,10,a2,d8,\
08,00,2b,30,30,9d,19,00,2f,43,3a,5c,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,5c,00,31,00,00,00,00,00,92,35,8c,5d,10,00,44,4f,43,55,4d,\
45,7e,31,00,00,44,00,03,00,04,00,ef,be,d4,34,43,ab,42,38,ad,84,14,00,00,00,\
44,00,6f,00,63,00,75,00,6d,00,65,00,6e,00,74,00,73,00,20,00,61,00,6e,00,64,\
00,20,00,53,00,65,00,74,00,74,00,69,00,6e,00,67,00,73,00,00,00,18,00,3e,00,\
31,00,00,00,00,00,3f,38,14,bc,10,00,46,52,41,4e,49,53,7e,31,00,00,26,00,03,\
00,04,00,ef,be,92,35,d2,28,42,38,ad,84,14,00,00,00,46,00,72,00,61,00,6e,00,\
e7,00,69,00,73,00,00,00,18,00,50,00,31,00,00,00,00,00,41,38,cc,58,11,00,46,\
61,76,6f,72,69,73,00,3a,00,03,00,04,00,ef,be,92,35,d3,28,42,38,e1,84,14,00,\
24,00,46,00,61,00,76,00,6f,00,72,00,69,00,73,00,00,00,40,73,68,65,6c,6c,33,\
32,2e,64,6c,6c,2c,2d,31,32,36,39,33,00,16,00,36,00,31,00,00,00,00,00,92,35,\
e1,28,10,00,4c,69,65,6e,73,00,22,00,03,00,04,00,ef,be,92,35,db,28,42,38,e1,\
84,14,00,00,00,4c,00,69,00,65,00,6e,00,73,00,00,00,14,00,00,00,60,00,00,00,\
03,00,00,a0,58,00,00,00,00,00,00,00,70,72,6f,70,72,69,65,74,2d,75,30,73,36,\
78,6c,00,7c,04,10,48,bf,d8,8c,46,a1,24,fc,11,8a,ac,16,4b,1d,8b,d0,b2,55,8e,\
db,11,93,82,00,11,d8,0d,01,e6,7c,04,10,48,bf,d8,8c,46,a1,24,fc,11,8a,ac,16,\
4b,1d,8b,d0,b2,55,8e,db,11,93,82,00,11,d8,0d,01,e6,00,00,00,00
"{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7}"=hex:c3,ea,53,0b,69,8d,9e,4b,9b,19,a3,\
7c,9a,56,76,a7
"{C4069E3A-68F1-403E-B40E-20066696354B}"=hex:3a,9e,06,c4,f1,68,3e,40,b4,0e,20,\
06,66,96,35,4b
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}"=hex:b1,c2,18,23,65,49,d4,11,9b,18,00,\
90,27,a5,cd,4f
"{74CC49F7-EB32-4A08-B204-948962A6E3DB}"=hex:f7,49,cc,74,32,eb,08,4a,b2,04,94,\
89,62,a6,e3,db
"{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}"=hex:ad,1d,ad,bd,46,c9,17,4a,ad,c1,64,\
b5,b4,ff,55,d0
"{7009FCD4-05BE-44F4-9583-93FE419AB7B0}"=hex:d4,fc,09,70,be,05,f4,44,95,83,93,\
fe,41,9a,b7,b0
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}"=hex:32,bd,99,ef,fb,c1,d2,11,89,2f,00,\
90,27,1d,4f,88
"ITBarLayout"=hex:11,00,00,00,4c,00,00,00,00,00,00,00,34,00,00,00,1f,00,1a,00,\
74,00,00,00,01,00,00,00,20,07,00,00,a0,0f,00,00,05,00,00,00,62,05,00,00,26,\
00,00,00,02,00,00,00,21,07,00,00,a0,0f,00,00,04,00,00,00,21,01,00,00,a0,0f,\
00,00,03,00,00,00,20,03,00,00,00,00,00,00,0a,00,00,00,21,05,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,32,bd,99,\
ef,fb,c1,d2,11,89,2f,00,90,27,1d,4f,88,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,b1,c2,18,23,65,49,d4,11,9b,18,00,90,27,a5,cd,4f,65,2b,28,6f,bf,\
56,d1,4b,a8,b2,a4,44,9a,05,86,3d,4f,d7,7b,4e,8d,2b,9e,46,8d,a9,fd,60,bb,9a,\
ae,33,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"ITBar7Layout"=hex:13,00,00,00,00,00,00,00,00,00,00,00,20,00,00,00,10,00,08,00,\
31,00,00,00,01,00,00,00,00,07,00,00,00,00,00,00,09,00,00,00,01,05,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,b1,c2,18,23,65,49,d4,11,9b,18,00,90,27,a5,cd,4f,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"{EE5D279F-081B-4404-994D-C6B60AAEBA6D}"=hex:9f,27,5d,ee,1b,08,04,44,99,4d,c6,\
b6,0a,ae,ba,6d
"{D3028143-6145-4318-99D3-3EDCE54A95A9}"=hex:43,81,02,d3,45,61,18,43,99,d3,3e,\
dc,e5,4a,95,a9
"{21FA44EF-376D-4D53-9B0F-8A89D3229068}"=hex:ef,44,fa,21,6d,37,53,4d,9b,0f,8a,\
89,d3,22,90,68
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BOONTY_GAMES]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BOONTY_GAMES\0000]
"Service"="Boonty Games"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Boonty Games"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FOPN]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FOPN\0000]
"Service"="FOPN"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="FOPN"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VSPF]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VSPF\0000]
"Service"="vspf"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="vspf"
"Capabilities"=dword:00000000
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VSPF_HK]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VSPF_HK\0000]
"Service"="vspf_hk"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="vspf_hk"
"Capabilities"=dword:00000000 -
Lis bien ces instructions !
- 1
- 2